Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/lhjGJIifChZhyO0SU9NNpxfAaP0.roa
File: lhjGJIifChZhyO0SU9NNpxfAaP0.roa (raw, json)
Hash identifier: nX/uaYhIBdSKJHgpMLgtjy0tDRvricoltizd7F7VYTI=
Subject key identifier: 96:18:C6:24:88:9F:0A:16:61:C8:ED:12:53:D3:4D:A7:17:C0:68:FD
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019789E51D5D802F792862764B7B862205EB
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/lhjGJIifChZhyO0SU9NNpxfAaP0.roa
Signing time: Thu 19 Jun 2025 20:33:03 +0000
ROA not before: Thu 19 Jun 2025 20:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47973
IP address blocks: 51.163.160.0/19 maxlen: 24
51.163.192.0/18 maxlen: 24
185.174.124.0/23 maxlen: 24
2a0b:9f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:e5:1d:5d:80:2f:79:28:62:76:4b:7b:86:22:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jun 19 20:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9618c624889f0a1661c8ed1253d34da717c068fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:a4:49:dc:7e:5a:e5:01:28:25:79:30:1b:
fb:89:09:53:f2:e4:7a:5c:a3:8c:f0:2a:f3:c7:77:
e9:8f:14:3f:2c:8d:50:81:f6:03:88:36:b2:22:df:
03:4b:d7:06:d8:49:ef:c5:b3:4c:c9:09:ee:16:17:
84:ab:2f:ac:e3:15:9a:1e:ab:7a:98:df:20:3e:0e:
02:8f:19:99:ce:82:10:ba:59:f7:99:19:20:68:51:
eb:da:c3:2b:38:b0:56:da:bc:eb:15:8e:d5:3f:9a:
5a:ce:17:2c:a5:28:10:5f:1a:59:d9:37:d5:66:ae:
35:58:03:9f:c3:af:98:c7:37:db:0c:ba:d3:6b:eb:
c5:66:f1:9c:45:5c:91:bb:36:c8:61:9b:bb:9c:26:
f8:20:f5:e2:a9:7c:d7:cb:a2:19:71:16:b8:0c:d1:
fc:6c:0b:51:10:c2:45:a9:b0:e6:ad:34:8d:52:30:
76:e1:04:4c:6f:74:9a:0e:ed:99:65:bf:2a:b5:51:
31:36:cf:a8:24:21:25:d6:d8:c6:26:ee:c6:c3:b9:
ba:11:ed:b1:43:a8:aa:bb:20:4b:01:7c:40:02:cb:
31:cb:00:3c:f9:8d:f5:19:7a:06:14:a2:a3:83:72:
84:10:79:eb:0a:85:2a:b2:f0:39:c1:ac:07:e9:1b:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:C6:24:88:9F:0A:16:61:C8:ED:12:53:D3:4D:A7:17:C0:68:FD
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/lhjGJIifChZhyO0SU9NNpxfAaP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.163.160.0-51.163.255.255
185.174.124.0/23
IPv6:
2a0b:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
a4:d8:04:1d:49:d5:44:14:58:95:9a:44:24:15:0c:dd:84:2f:
80:e5:0e:e6:36:bd:09:71:8d:4e:e0:ca:ba:36:ac:19:75:ba:
8e:be:51:3e:46:df:64:fa:5b:a7:a7:fe:5d:0d:18:b9:4f:8e:
95:67:cb:37:0f:1d:ac:29:a8:41:fa:31:83:6a:01:b9:52:f2:
4a:9e:ee:12:d1:2f:e1:a3:87:76:4f:0a:4f:c9:62:e2:11:02:
e5:c1:03:50:4d:24:54:fb:9e:13:6b:f0:52:1c:0f:7c:13:87:
43:5b:74:16:b1:f5:20:ab:92:f2:55:16:07:b5:09:f8:1f:25:
dd:dd:cd:ba:7d:9b:7e:39:92:5c:4b:7f:d8:f9:24:68:9d:4b:
18:7b:63:dc:8d:8e:63:ab:6a:b9:c6:06:af:c8:47:21:05:43:
b1:b2:f4:93:27:25:5f:50:cc:45:15:9f:4e:ef:72:24:66:75:
a1:6b:10:1a:c8:9b:01:3e:18:d9:22:2e:cd:bd:16:08:3f:f8:
52:e5:73:fd:5b:00:c3:87:bf:e1:28:8e:46:73:56:ed:8f:41:
46:06:db:8f:9c:8d:f4:97:f3:0c:b5:1b:60:60:a2:59:bd:ff:
be:1d:f0:8c:10:e6:6b:f5:2e:37:2a:5d:99:0a:c8:8b:51:a0:
f1:86:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:06:44 2025 by rpki-client